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We present a scheme for quantum secure direct communication with quantum encryption. The 
two authorized users use repeatedly a sequence of the pure entangled pairs (quantum key) shared 
for encrypting and decrypting the secret message carried by the traveling photons directly. For 
checking eavesdropping, the two parties perform the single-photon measurements on some decoy 
partides before each round. This scheme has the advantage that the pure entangled quantum signal 
source is feasible at present and any eavesdropper cannot steal the message. 
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Quantum mcchanics provides some novel ways for pro- 
cessing and transmission of quantum information. Quan- 
tum key distribution (QKD) is considered to be the safest 
system for creating a private key between two remote au- 
thorized users, say Alice and Bob, and may be the most 
advanced application of quantum information. The non- 
cloning theorem forbids an eavesdropper, Eve to eaves- 
drop the quantum communication freely. In 1984, Ben- 
nett and Brassard [1[ proposed an original QKD protocol 
with nonorthogonal polarized singlo photons. As an un- 
known quantum states cannot be eavesdropped without 
leaving a trace in the outeomes obtained by the two par- 
ties, the BB84 protocol is unconditionally secure @|. In 
1991, Ekert [3] introduced another QKD scheme based 
on the correlation of an Einstein-Podolsky-Rosen (EPR) 
pair, the maximally entangled two-particlc state, by us- 
ing Bell inequality for error rate analysis. Subsequently, 
Bcnnctt, Brassard and Mermin (BBM92) [| simplified 
the process for eavesdropping check in this scheme with 
two nonorthogonal measuring bases. Lo, Chau and Arde- 
hali Q presented a QKD model with two nonsymmetric 
bases. Huang et al. [g] and Deng et al. Q designed two 
QKD models by using repeatedly a sequence of private 
classical bits shared initially for improving their efficiency 
for qubits or reducing the delay time in QKD with some 
orthogonal states. To date, much attention has been fo- 
cused on QKD 0, i, 0, |, S ES E3 ■ 

Recently, quantum secure direct communication 
(QSDC), a novel co ncep t, was pro posed and pur sued b y 
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to generate a private key between the two remote parties 
of communication, QSDC is used to communicate the se- 
cret message directly without generating a key in advance 
and then encrypting the message for its transmission in 
a classical channel. According to the Deng-Long-Liu cri- 
terion 0, El E3 , on one hand, the sender Alice should 
confirm whcther the quantum channel is secure before 
she encodes the message on the quantum states trans- 
mitted as the messages cannot be discarded in QSDC 
[Ï2l IÏ31 EU- Moreover, the message should be read out 
by the receiver Bob directly [Ü El El- 

On the other 

hand, the security of quantum communication is based 
on the error rate analysis with the theories in statistics 
[Ï2l lÜïl [Ï4j . In this way, the quantum states in QSDC 
should be transmitted in a quantum data block, same as 
those in Refs. 0, El El El El El d ■ It is not a 
necessary condition in QKD as the error rate analysis is 
just a postprocessing step, and the results transmitted 
do not include the information about the secret message 
and can be abandoned El EU, EU • 

In 2002 Beige et al. [19] proposed a QSDC scheme 
with single-photon two-qubit states. In their scheme, one 
qubit is used to check the security of the quantum chan- 
nel after some results arc transmitted, and the other is 
used to carry the message. The message can be read out 
after a transmission of an additional classical bit for each 
qubit 20]. Subsequently Bostròm and Felbingeer pro- 
posed a quasi-secure QSDC protocol, called Ping-Pong 
QSDC protocol [20(, with an EPR pair. In this scheme 
the eavesdropping done by Eve can be hidden with the 
loss of a practical quantum channel [2l·| and the error 
aroused by the noise of the quantum channel 22j . More- 
over, the two parties can accomplish the error rate anal- 
ysis only after they transmit an enough large set of mes- 
sage, and some message may leak to Eve in a noise chan- 
nel. The two-step QSDC scheme E2l and the scheme 
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with single photons [13j proposed by Deng et al. can be 
made secure even in a noisy channel with quantum pri- 
vacy amplification [30Í . l3Ïj | as the states are transmitted 
in a quantum date block and the confirmation of the se- 
curity of the quantum channel has be achieved before the 
sender encodes her message on the states. These ideas 
are borrowed by Wang et al. [Ü[ to design the QSDC 
models as well. 

In this paper, we will present a scheme for quantum 
secure direct communication with quantum encryption. 
This protocol uses a controlled-not (CNot) gate to en- 
code and decode the secret message. The two parties 
first share privately a sequence of two-photon pure en- 
tangled states which are feasible with the present tech- 
nologies, and then use the states as their private quantum 
key which is reusable with a eavesdropping check before 
each round. The receiver can read out directly the mes- 
sage and each photon transmitted between the parties 
can carry one bit of message securely in principle. 

Generally speaking, many QKD and QSDC schemes 
choose EPR pairs as quantum information carriers to 
transmit a private key or a secret message. The reason 
is that the two photons in the four Bell states have good 
correlations in both the measuring bases Z = {|0), |1)} 
andX = {|±x) = ^(|0)±|l))}. 



\^+) AB = -^(|0) a |0) b + |1)a|1)b; 
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This feature is very useful in the eavesdropping check 
process. However, it is difficult to produce the maximally 
two-particle entangled states with the present technolo- 
gies. Contrarily, in experiments the two photons pre- 
pared are usually in the pure entangled state, such as 
\^)ab = o|0)a|0) b +6|1)a|1>b {\a\ 2 + \b\ 2 = 1). The two 
photons are always correlated in the basis Z, but not in 
the basis X, as 

\*)ab = a\0) A \0) B + b\l) A \l)B 

= \i(a + b)(\ +x) A \ +x) b + | -x) A \ -x) b ) 
+ {a - b)(\ + x) A \ -x) B + \- x) a \ + x) B )}-(5) 



This means that the security of the quantum communi- 
cation with pure entangled states is lower than that with 
Bell states if we use the two bases X and Z to check 
the security. On the other hand, those pure entangled 
quantum sources are more convenient in practical appli- 
cations. In this QSDC scheme, we use some decoy pho- 
tons to check the eavesdropping for overcoming the fiaw 
of pure entangled states. 

Now, let us describe our QSDC scheme in detail as 
follows. It includes four steps. 

(51) The two authorized users (Alice and Bob) share 
a sequence of two-particle pure entangled states securely 
as their private quantum key. 

For this task, Bob first prepares n two-photon pairs 
randomly in one of the two pure entangled states | v E , )ab 
and \§)ab- Here \<è) AB = ò|0) A |0) B + a\l) A \l) B which 
can be obtained by fiipping the bit value of the two pho- 
tons in the state \^)ab] i-e., \$)ab = <8> \^)ab 
(here a x is a Pauli operator). Bob picks up photon B in 
each pair for forming the sequence Sb ■ [B\, B2, • • • , B. n ]. 
The other sequence Sa is made up of partides Ai(i = 
1,2. ..n). He keeps the sequence Sb at home and sends 
the sequence Sa to Alice. For checking eavesdropping, 
Bob inserts some decoy photons Sde, which are randomly 
in one of the four states {|0), |1), \+x), |— x)}, into the se- 
quence S A - He can get a decoy photon by measuring one 
photon in a two-photon pair |Í') J 4B with the basis Z and 
operating on the other photon with a x or a Hadamard 
(H) operation. In a word, it is unnecessary for the users 
to have an ideal single-photon source in this scheme. 

After Alice announces the the receipt of the sequence 
Sa, Bob telis her the positions and the states of the de- 
coy photons. Alice measures the decoy photons with the 
suitable bases and analyzes the error rate of those out- 
comes with Bob. If the error rate is very low, they can 
obtain a sequence of quantum key privately and continuo 
to the next step; otherwise, they discard the transmission 
and repeat quantum communication from the beginning. 

(52) Alice and Bob use their private quantum key to 
encrypt and decrypt the secret message directly. 

For QSDC, Alice prepares a sequence of traveling par- 
tides 7i which are in one of the two states {|0), |1)} ac- 
cording to the bit value of her secret message is or 
1, respectively. We call it the traveling particle sequence 
St- For checking eavesdropping, similar to Refs. [Ï2.[Ï3l|. 
Alice needs to add a small trick in the sequence St be- 
fore she sends it to the quantum channel. That is, he 
inserts some decoy photons, say Sd which are randomly 
in the four states {|0), | + x), \ — x)} and distributed 
randomly in the sequence St- Alice uses the quantum 
key, the pure entangled pairs shared {|Í') J 4B, I^ab} to 
encrypt the traveling partides in the sequence St except 
for the decoy photons. That is, Alice performs a CNot 
operation on the partides Ai and 7^ (i = 1, 2, . . . , n) by 
using the particle Ai as the control qubit. Then Alice 
sends all the traveling partides to Bob. 

After receiving the sequence St , Bob asks Alice to teli 
him the positions and the states of the decoy photons in 
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the sequence St, and then measures them with the same 
bases as those Alice chose for preparing them. For the 
partides Bi and Bob takes a CNot operation on them 
with the particle Bi as the control qubit, similar to Alice, 
and then he measures the partides 73 with the basis Z 
and records the outeomes of the measurements. 

(53) Alice and Bob check the security of their transmis- 
sion. They analyze the error rate of the decoy photons. 
If the error rate is very low, Bob can trust this transmis- 
sion, and read out the message directly. Otherwise they 
have to abandon the results and repeat the procedures 
from the beginning. 

(54) If the quantum communication succeeds, Alice 
and Bob repeat their communication from step 2. That 
is, they use repeatedly the pure entangled pairs as their 
quantum key and transmit the secret message again in 
the next round. 

In an ideal condition, this QSDC scheme is secure for 
any intercepting-resending attack strategies if the quan- 
tum key is private because it is equivalent to a quantum 
one-time-pad crypto-system [1, U|. The encryption on 
a traveling particle 73 with a CNot operation makes it 
entangle with a quantum system in the quantum key. 
For an eavesdropper, any quantum system in the quan- 
tum key is randomly in one of the two states {I^ab = 

a\0) A \0) B + &|1>a|1)b, |*}ab = b\0) A \0) B + o|1)a|1)b}. 
After the CNot operation done by Alice, the three par- 
tides Ai, Bi, and 7$ are in the GHZ-class state \^) sl = 
a|00 7l )+6|ll 7 7))A l B l7ï or \®) s} = b\00ji)+a\llji)) AiBni 
randomly. The reduced density matrix of the traveling 

particle 7$ is p li = \ í g ^ ^ . That is, the traveling par- 
ticle is in one of the two eigenvectors of any measuring 
operator with the same probability 50% for any eaves- 
dropper, and none can get a useful information about 
the state of the traveling particle 7, as the effect of his 
eavesdropping on the traveling particle is as same as that 
by guessing its outeome randomly. 

If Eve wants to steal the message carried by the trav- 
eling partides, she should eavesdrop the quantum key by 
capturing the traveling partides first, and then steal the 
information of the traveling partides transmitted in the 
next round. However, her action will leave a track in the 
eavesdropping check. The reason is that the procedure 
of checking eavesdropping done by the two authorized 
users in this scheme, in essence, is the same as that in 
the BB84 QKD protocol [1 for any eavesdropper. That 
is, the decoy photons are produced by choosing randomly 
one of the two bases Z and X, and are inserted into the 
traveling sequence St randomly. Also, Bob measures 



them with the same bases as those chosen by Alice af- 
ter he receives the traveling sequence and obtains the 
information about their bases of the decoy photons. For 
any eavesdropper, the bases chosen by Bob are random 
even though they are announced in públic finally as no 
eavesdropper has the access to the traveling partides af- 
ter Bob receives them. Any eavesdropping will inevitably 
disturb the states of the decoy photons and be detected 
by the two authorized users if an eavesdropper monitors 
the quantum line, same as that in the BB84 protocol pj. 

In a practical channel, noises will affect the entangle- 
ment of the quantum key. In this time, the users should 
cxploit entanglement purification [32j to keep the en- 
tanglemcnt in the quantum key, and do quantum pri- 
vacy amplification [301 ] on them as well. However, the 
two users need not to purify their states to Bell states, 
just the pure entangled states \$>} AB = a\0) A \0) B + 
b\l) A \l) B {\$) AB = b\0) A \0) B + a\l) A \l) B ) or \V) AB = 
a'\Q) A \Q) B +b'\l) A \l) B {W) AB = ò'|0) j4 |0) B +a'|l) j4 |l) B ) 
in this scheme. Here |o'| 2 + |6'| 2 = 1. As the quantum key 
is just used to encrypt and decrypt the secret message, 
it is unnecessary for the users to keep the same states as 
those they used in last time, just the correlation of each 
pair, which will increase the efficiency of the entangle- 
ment purification process largely. Certainly, on the one 
hand, the users should do error correction on their results 
in p ractical applications, same as the two-step protocol 
[Ï2j |. On the other hand, this QSDC scheme can only used 
to distribute a private key if the loss of the quantum line 
is unreasonably large. 

In summary, quantum secure direct communication 
can be done with quantum encryption by means that 
the two authorized users first share privately a sequence 
of pure entangled pairs and use them repeatedly as the 
quantum key for encrypting the traveling partides which 
are in the eigenvectors of the basis Z . The receiver can 
read out the message directly and each particle can carry 
one bit of the message securely. For checking eavesdrop- 
ping, the sender adds a small trick in the traveling par- 
tides which can forbid Eve to eavesdrop the quantum 
channel freely. The most important advantage of this 
protocol is that the pure entangled quantum signal source 
is feasible at present. As the photons used for security 
checking is not the quantum key shared, the quantum 
key is reusable without abatement in principio. 
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